-
Notifications
You must be signed in to change notification settings - Fork 9
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
cab53e3
commit 797ce6f
Showing
4 changed files
with
404 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,41 @@ | ||
| --- | ||
| # generated by https://github.com/hashicorp/terraform-plugin-docs | ||
| page_title: "temporalcloud_apikey Resource - terraform-provider-temporalcloud" | ||
| subcategory: "" | ||
| description: |- | ||
| Provisions a Temporal Cloud API key. | ||
| --- | ||
|
|
||
| # temporalcloud_apikey (Resource) | ||
|
|
||
| Provisions a Temporal Cloud API key. | ||
|
|
||
|
|
||
|
|
||
| <!-- schema generated by tfplugindocs --> | ||
| ## Schema | ||
|
|
||
| ### Required | ||
|
|
||
| - `display_name` (String) The display name for the API key. | ||
| - `expiry_time` (String) The expiry time for the API key in ISO 8601 format. | ||
| - `owner_id` (String) The ID of the owner to create the API key for. | ||
| - `owner_type` (String) The type of the owner to create the API key. | ||
|
|
||
| ### Optional | ||
|
|
||
| - `description` (String) The description for the API key. | ||
| - `timeouts` (Block, Optional) (see [below for nested schema](#nestedblock--timeouts)) | ||
|
|
||
| ### Read-Only | ||
|
|
||
| - `id` (String) The unique identifier of the API key. | ||
| - `state` (String) The current state of the API key. | ||
|
|
||
| <a id="nestedblock--timeouts"></a> | ||
| ### Nested Schema for `timeouts` | ||
|
|
||
| Optional: | ||
|
|
||
| - `create` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). | ||
| - `delete` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,318 @@ | ||
| package provider | ||
|
|
||
| import ( | ||
| "context" | ||
| "fmt" | ||
| "github.com/hashicorp/terraform-plugin-framework-timeouts/resource/timeouts" | ||
| "github.com/hashicorp/terraform-plugin-framework/path" | ||
| "github.com/hashicorp/terraform-plugin-framework/resource" | ||
| "github.com/hashicorp/terraform-plugin-framework/resource/schema" | ||
| "github.com/hashicorp/terraform-plugin-framework/resource/schema/planmodifier" | ||
| "github.com/hashicorp/terraform-plugin-framework/resource/schema/stringplanmodifier" | ||
| "github.com/hashicorp/terraform-plugin-framework/types" | ||
| "github.com/temporalio/terraform-provider-temporalcloud/internal/client" | ||
| cloudservicev1 "go.temporal.io/api/cloud/cloudservice/v1" | ||
| identityv1 "go.temporal.io/api/cloud/identity/v1" | ||
| "google.golang.org/protobuf/types/known/timestamppb" | ||
| "time" | ||
| ) | ||
|
|
||
| type ( | ||
| apiKeyResource struct { | ||
| client *client.Client | ||
| } | ||
|
|
||
| apiKeyResourceModel struct { | ||
| ID types.String `tfsdk:"id"` | ||
| State types.String `tfsdk:"state"` | ||
| OwnerType types.String `tfsdk:"owner_type"` | ||
| OwnerID types.String `tfsdk:"owner_id"` | ||
| DisplayName types.String `tfsdk:"display_name"` | ||
| Description types.String `tfsdk:"description"` | ||
| ExpiryTime types.String `tfsdk:"expiry_time"` // ISO 8601 format | ||
| Timeouts timeouts.Value `tfsdk:"timeouts"` | ||
| } | ||
| ) | ||
|
|
||
| var ( | ||
| _ resource.Resource = (*apiKeyResource)(nil) | ||
| _ resource.ResourceWithConfigure = (*apiKeyResource)(nil) | ||
| _ resource.ResourceWithImportState = (*apiKeyResource)(nil) | ||
| ) | ||
|
|
||
| func NewApiKeyResource() resource.Resource { | ||
| return &apiKeyResource{} | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Configure(_ context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse) { | ||
| if req.ProviderData == nil { | ||
| return | ||
| } | ||
|
|
||
| client, ok := req.ProviderData.(*client.Client) | ||
| if !ok { | ||
| resp.Diagnostics.AddError( | ||
| "Unexpected Data Source Configure Type", | ||
| fmt.Sprintf("Expected *client.Client, got: %T. Please report this issue to the provider developers.", req.ProviderData), | ||
| ) | ||
|
|
||
| return | ||
| } | ||
|
|
||
| r.client = client | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Metadata(_ context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse) { | ||
| resp.TypeName = req.ProviderTypeName + "_apikey" | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Schema(ctx context.Context, _ resource.SchemaRequest, resp *resource.SchemaResponse) { | ||
| resp.Schema = schema.Schema{ | ||
| Description: "Provisions a Temporal Cloud API key.", | ||
| Attributes: map[string]schema.Attribute{ | ||
| "id": schema.StringAttribute{ | ||
| Description: "The unique identifier of the API key.", | ||
| Computed: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.UseStateForUnknown(), | ||
| }, | ||
| }, | ||
| "state": schema.StringAttribute{ | ||
| Description: "The current state of the API key.", | ||
| Computed: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.UseStateForUnknown(), | ||
| }, | ||
| }, | ||
| "owner_type": schema.StringAttribute{ | ||
| Description: "The type of the owner to create the API key.", | ||
| Required: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.RequiresReplace(), | ||
| }, | ||
| }, | ||
| "owner_id": schema.StringAttribute{ | ||
| Description: "The ID of the owner to create the API key for.", | ||
| Required: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.RequiresReplace(), | ||
| }, | ||
| }, | ||
| "display_name": schema.StringAttribute{ | ||
| Description: "The display name for the API key.", | ||
| Required: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.RequiresReplace(), | ||
| }, | ||
| }, | ||
| "description": schema.StringAttribute{ | ||
| Description: "The description for the API key.", | ||
| Optional: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.RequiresReplace(), | ||
| }, | ||
| }, | ||
| "expiry_time": schema.StringAttribute{ | ||
| Description: "The expiry time for the API key in ISO 8601 format.", | ||
| Required: true, | ||
| PlanModifiers: []planmodifier.String{ | ||
| stringplanmodifier.RequiresReplace(), | ||
| }, | ||
| }, | ||
| }, | ||
| Blocks: map[string]schema.Block{ | ||
| "timeouts": timeouts.Block(ctx, timeouts.Opts{ | ||
| Create: true, | ||
| Delete: true, | ||
| }), | ||
| }, | ||
| } | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Create(ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse) { | ||
| var plan apiKeyResourceModel | ||
| resp.Diagnostics.Append(req.Plan.Get(ctx, &plan)...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| createTimeout, diags := plan.Timeouts.Create(ctx, defaultCreateTimeout) | ||
| resp.Diagnostics.Append(diags...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| ctx, cancel := context.WithTimeout(ctx, createTimeout) | ||
| defer cancel() | ||
|
|
||
| // Parse the expiry time from the plan | ||
| expiryTimeString := plan.ExpiryTime.ValueString() | ||
| expiryTime, err := time.Parse(time.RFC3339, expiryTimeString) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Invalid ExpiryTime", "Could not parse ExpiryTime from plan: "+err.Error()) | ||
| return | ||
| } | ||
|
|
||
| // Convert time.Time to protobuf Timestamp | ||
| expiryTimestamp := timestamppb.New(expiryTime) | ||
|
|
||
| svcResp, err := r.client.CloudService().CreateApiKey(ctx, &cloudservicev1.CreateApiKeyRequest{ | ||
| Spec: &identityv1.ApiKeySpec{ | ||
| OwnerId: plan.OwnerID.ValueString(), | ||
| OwnerType: plan.OwnerType.ValueString(), | ||
| DisplayName: plan.DisplayName.ValueString(), | ||
| Description: plan.Description.ValueString(), | ||
| ExpiryTime: expiryTimestamp, | ||
| }, | ||
| }) | ||
|
|
||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to create api key", err.Error()) | ||
| return | ||
| } | ||
| if err := client.AwaitAsyncOperation(ctx, r.client, svcResp.AsyncOperation); err != nil { | ||
| resp.Diagnostics.AddError("Failed to create api key", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| apiKey, err := r.client.CloudService().GetApiKey(ctx, &cloudservicev1.GetApiKeyRequest{ | ||
| KeyId: svcResp.GetKeyId(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to get api key after creation", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| updateApiKeyModelFromSpec(&plan, apiKey.ApiKey) | ||
| resp.Diagnostics.Append(resp.State.Set(ctx, plan)...) | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Read(ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse) { | ||
| var state apiKeyResourceModel | ||
| resp.Diagnostics.Append(req.State.Get(ctx, &state)...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| apiKey, err := r.client.CloudService().GetApiKey(ctx, &cloudservicev1.GetApiKeyRequest{ | ||
| KeyId: state.ID.ValueString(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to get api key", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| updateApiKeyModelFromSpec(&state, apiKey.ApiKey) | ||
| resp.Diagnostics.Append(resp.State.Set(ctx, state)...) | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Update(ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse) { | ||
| var plan apiKeyResourceModel | ||
| resp.Diagnostics.Append(req.Plan.Get(ctx, &plan)...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| apiKey, err := r.client.CloudService().GetApiKey(ctx, &cloudservicev1.GetApiKeyRequest{ | ||
| KeyId: plan.ID.ValueString(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to get current api key status", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| // Parse the expiry time from the plan | ||
| expiryTimeString := plan.ExpiryTime.ValueString() | ||
| expiryTime, err := time.Parse(time.RFC3339, expiryTimeString) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Invalid ExpiryTime", "Could not parse ExpiryTime from plan: "+err.Error()) | ||
| return | ||
| } | ||
|
|
||
| // Convert time.Time to protobuf Timestamp | ||
| expiryTimestamp := timestamppb.New(expiryTime) | ||
|
|
||
| svcResp, err := r.client.CloudService().UpdateApiKey(ctx, &cloudservicev1.UpdateApiKeyRequest{ | ||
| KeyId: plan.ID.ValueString(), | ||
| Spec: &identityv1.ApiKeySpec{ | ||
| OwnerId: plan.OwnerID.ValueString(), | ||
| OwnerType: plan.OwnerType.ValueString(), | ||
| DisplayName: plan.DisplayName.ValueString(), | ||
| Description: plan.Description.ValueString(), | ||
| ExpiryTime: expiryTimestamp, | ||
| }, | ||
| ResourceVersion: apiKey.GetApiKey().GetResourceVersion(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to update api key", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| if err := client.AwaitAsyncOperation(ctx, r.client, svcResp.GetAsyncOperation()); err != nil { | ||
| resp.Diagnostics.AddError("Failed to update api key", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| apiKey, err = r.client.CloudService().GetApiKey(ctx, &cloudservicev1.GetApiKeyRequest{ | ||
| KeyId: plan.ID.ValueString(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to get api key after update", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| updateApiKeyModelFromSpec(&plan, apiKey.ApiKey) | ||
| resp.Diagnostics.Append(resp.State.Set(ctx, plan)...) | ||
| } | ||
|
|
||
| func (r *apiKeyResource) Delete(ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse) { | ||
| var state apiKeyResourceModel | ||
| resp.Diagnostics.Append(req.State.Get(ctx, &state)...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| deleteTimeout, diags := state.Timeouts.Delete(ctx, defaultDeleteTimeout) | ||
| resp.Diagnostics.Append(diags...) | ||
| if resp.Diagnostics.HasError() { | ||
| return | ||
| } | ||
|
|
||
| apiKey, err := r.client.CloudService().GetApiKey(ctx, &cloudservicev1.GetApiKeyRequest{ | ||
| KeyId: state.ID.ValueString(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to get current api key status", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| ctx, cancel := context.WithTimeout(ctx, deleteTimeout) | ||
| defer cancel() | ||
|
|
||
| svcResp, err := r.client.CloudService().DeleteApiKey(ctx, &cloudservicev1.DeleteApiKeyRequest{ | ||
| KeyId: state.ID.ValueString(), | ||
| ResourceVersion: apiKey.GetApiKey().GetResourceVersion(), | ||
| }) | ||
| if err != nil { | ||
| resp.Diagnostics.AddError("Failed to delete api key", err.Error()) | ||
| return | ||
| } | ||
|
|
||
| if err := client.AwaitAsyncOperation(ctx, r.client, svcResp.AsyncOperation); err != nil { | ||
| resp.Diagnostics.AddError("Failed to delete api key", err.Error()) | ||
| } | ||
| } | ||
|
|
||
| func (r *apiKeyResource) ImportState(ctx context.Context, req resource.ImportStateRequest, resp *resource.ImportStateResponse) { | ||
| resource.ImportStatePassthroughID(ctx, path.Root("id"), req, resp) | ||
| } | ||
|
|
||
| func updateApiKeyModelFromSpec(state *apiKeyResourceModel, apikey *identityv1.ApiKey) { | ||
| state.ID = types.StringValue(apikey.GetId()) | ||
| state.State = types.StringValue(apikey.GetState()) | ||
| state.OwnerID = types.StringValue(apikey.GetSpec().GetOwnerId()) | ||
| state.OwnerType = types.StringValue(apikey.GetSpec().GetOwnerType()) | ||
| state.DisplayName = types.StringValue(apikey.GetSpec().GetDisplayName()) | ||
| state.Description = types.StringValue(apikey.GetSpec().GetDescription()) | ||
| state.ExpiryTime = types.StringValue(apikey.GetSpec().GetExpiryTime().AsTime().Format(time.RFC3339)) | ||
| } |
Oops, something went wrong.